Splunk Search

How to convert my response time field into seconds?

Path Finder

i want to retrieve responsetime and convert it into seconds. please help me with Rex

IP                        Responsetime(ms)
12.34.567.890             163000
23.45.678.901             199000
34.56.789.012             162000
1 Solution

Revered Legend

So the Reponsetime(ms) is already available, you just want to convert it to sec. If yes, then just add following eval to your search

your current search | eval "Responsetime(ms)"='Responsetime(ms)'/1000

View solution in original post

Revered Legend

So the Reponsetime(ms) is already available, you just want to convert it to sec. If yes, then just add following eval to your search

your current search | eval "Responsetime(ms)"='Responsetime(ms)'/1000

View solution in original post

Revered Legend

This is single field or you've two fields IP and Responsetime(ms)?

0 Karma

Path Finder

two fields

0 Karma
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!